florian/security-hooks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add agentic tooling, cleanup

Browse Source
This commit is contained in:
Flo
2026-03-30 12:59:23 +02:00
parent 7645402347
commit ebb42dbad7
40 changed files with 2066 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@@ -87,7 +87,7 @@ disabled = ["force-push"]
## Architecture
- **Rust shim** — ~1MB static binary, <1ms startup, forwards payloads via Unix socket
- **Rust shim** — all three AI tools invoke hooks by spawning a process, piping JSON to stdin, and reading JSON from stdout. That process has to exist, but the rule engine lives in a long-running Elixir daemon for hot-reload and sub-millisecond evaluation. The shim bridges the two: a ~1MB static Rust binary that connects to the daemon's Unix socket and relays the verdict. Rust because it starts in <1ms — bash has quoting bugs and needs `socat`, Elixir escript pays ~300ms BEAM boot per call, and a second Burrito binary would unpack on every cold invocation.
- **Elixir daemon** — distributed as a [Burrito](https://github.com/burrito-elixir/burrito) binary (no Erlang/Elixir install needed)
- **Adapter layer** — normalizes payloads across Claude Code, Gemini CLI, and Codex
- **tree-sitter-bash** — Rust NIF for robust AST parsing of shell commands
@@ -100,7 +100,7 @@ macOS (aarch64, x86_64) &middot; Linux (x86_64, aarch64) &middot; WSL
## Status
Design phase. See [`docs/superpowers/specs/2026-03-26-security-hooks-design.md`](docs/superpowers/specs/2026-03-26-security-hooks-design.md) for the full spec.
Design phase. See [`docs/specs/2026-03-26-security-hooks-design.md`](docs/specs/2026-03-26-security-hooks-design.md) for the full spec.
## License